Security Policy

Supported Versions

• main branch (latest)

Reporting a Vulnerability

• Open a private security advisory (GitHub → Security → Report a vulnerability), or email the maintainer.
• Include steps to reproduce, environment, and potential impact.

Scope

• Read‑only API design, policy enforcement, rate limiting, admin auth/CSRF.

Non‑Goals

• Write operations or authorization beyond defined row filters.